HP 6125XLG R2306-HP 6125XLG Blade Switch FCoE Configuration Guide - Page 77

Configuring FC zones, Overview, Zone database, Zone database structure

Get HP 6125XLG PDF manuals and user guides View all HP 6125XLG manuals
Add to My Manuals
Save this manual to your list of manuals

Page 77 highlights

Configuring FC zones Overview The VSAN technology divides a physical SAN into multiple VSANs, which are separated from one another, and provides more secure, reliable, and flexible services. A VSAN, however, cannot perform access control over the servers and disk devices (or the N_Ports) connected to a fabric. N_Ports in the same VSAN can access one another only if these N_Ports register name services. This creates data security risks. Zoning can solve the preceding problem by dividing a VSAN into zones and adding N_Ports to different zones for different purposes. In this manner, N_Ports in different zones are separated to implement access control. Zone database To control access among N_Ports, you can divide N_Ports into different zones as needed, which comprise a zone set. The same N-Ports can form multiple zone sets according to different zone division policies. These zones and zone sets comprise a zone database. Zone database structure The zone database is organized into three levels: zone set, zone, and zone member. Figure 19 Zone database structure In the zone database structure: • A zone set is a set of zones. A zone is a set of zone members, which are N_Ports. Zone membership can be identified by the port WWN (pWWN) or FC address of an N_Port. 71

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
71
Configuring FC zones
Overview
The VSAN technology divides a physical SAN into multiple VSANs, which are separated from one
another, and provides more secure, reliable, and flexible services. A VSAN, however, cannot perform
access control over the servers and disk devices (or the N_Ports) connected to a fabric. N_Ports in the
same VSAN can access one another only if these N_Ports register name services. This creates data
security risks.
Zoning can solve the preceding problem by dividing a VSAN into zones and adding N_Ports to different
zones for different purposes. In this manner, N_Ports in different zones are separated to implement
access control.
Zone database
To control access among N_Ports, you can divide N_Ports into different zones as needed, which
comprise a zone set. The same N-Ports can form multiple zone sets according to different zone division
policies. These zones and zone sets comprise a zone database.
Zone database structure
The zone database is organized into three levels: zone set, zone, and zone member.
Figure 19
Zone database structure
In the zone database structure:
•
A zone set is a set of zones. A zone is a set of zone members, which are N_Ports. Zone membership
can be identified by the port WWN (pWWN) or FC address of an N_Port.